PT-2026-135235

Published

2026-10-22

·

Updated

2026-10-22

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

  • update to CKBI 2.92 from NSS 3.131.1
  • updated certificates:

  • Certificate "OISTE Server Root RSA G1"

  • Certificate "Amazon Root CA 1"

  • Certificate "Amazon Root CA 2"

  • Certificate "Amazon Root CA 3"

  • Certificate "Amazon Root CA 4"

  • Certificate "GlobalSign ECC Root CA - R4"

  • Certificate "GTS Root R1"

  • Certificate "GTS Root R3"

  • Certificate "GTS Root R4"

  • Certificate "TrustAsia Global Root CA G3"

  • Certificate "TrustAsia Global Root CA G4"

  • removed certificates:

  • Certificate "CFCA GT CA"

  • Certificate "E-Tugra Global Root CA ECC v3"

  • Certificate "E-Tugra Global Root CA RSA v3"

  • Certificate "GeoTrust Primary Certification Authority"

  • Certificate "GeoTrust Primary Certification Authority - G2"

  • Certificate "GeoTrust Primary Certification Authority - G3"

  • Certificate "GeoTrust Universal CA"

  • Certificate "GeoTrust Universal CA 2"

  • Certificate "VeriSign Class 2 Public Primary Certification Authority - G3"

  • Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"

  • Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"

  • Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"

  • Certificate "VeriSign Universal Root Certification Authority"

  • Certificate "emSign ECC Root CA - G3"

  • Certificate "thawte Primary Root CA"

  • Certificate "thawte Primary Root CA - G2"

  • Certificate "thawte Primary Root CA - G3"

  • added certificates:

  • Certificate "e-Szigno TLS Root CA 2023"

  • Certificate "SecureSign Root CA16"

  • Certificate "SECOM TLS RSA Root CA 2024"

  • Certificate "SECOM TLS ECC Root CA 2024"

  • Certificate "SECOM SMIME RSA Root CA 2024"

  • Certificate "Telia EC Email Root CA v3"

  • Certificate "Telia EC TLS Root CA v3"

  • Certificate "Telia RSA Email Root CA v3"

  • Certificate "Telia RSA TLS Root CA v3"

  • distrusted certificates:

  • Certificate "AC Raíz Certicámara S.A."

  • Certificate "ACEDICOM Root"

  • Certificate "AffirmTrust Networking"

  • Certificate "America Online Root Certification Authority 1"

  • Certificate "CA Disig Root R1"

  • Certificate "Certinomis - Autorité Racine"

  • Certificate "ComSign CA"

  • Certificate "ComSign Secured CA"

  • Certificate "EC-ACC"

  • Certificate "EE Certification Centre Root CA"

  • Certificate "Entrust Root Certification Authority"

  • Certificate "Hellenic Academic and Research Institutions RootCA 2011"

  • Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"

  • Certificate "Secure Global CA"

  • Certificate "SecureSign RootCA11"

  • Certificate "SecureTrust CA"

  • Certificate "SECOM Trust Systems CO.,LTD."

  • Certificate "SwissSign Platinum CA - G2"

  • Certificate "SwissSign Silver CA - G2"

  • Certificate "TeliaSonera Root CA v1"

  • Certificate "XRamp Global CA Root"

  • Certificate "certSIGN ROOT CA"

  • Certificate "ePKI Root Certification Authority"

  • no longer trusted for TLS server authentication:

  • Certificate "QuoVadis Root CA 2"

  • Certificate "QuoVadis Root CA 3"

  • Certificate "DigiCert Assured ID Root CA"

  • Certificate "DigiCert Global Root CA"

  • Certificate "DigiCert High Assurance EV Root CA"

  • Certificate "SwissSign Gold CA - G2"

  • Certificate "COMODO Certification Authority"

  • Certificate "Certigna"

  • Certificate "Atos TrustedRoot 2011"

  • Certificate "Entrust Root Certification Authority - G2"

  • Certificate "Entrust Root Certification Authority - EC1"

  • Certificate "GTS Root R2"

Vendors
Affected products
Related identifiers
CLSA-2026-1792701834
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com